Summary
Multiple Siemens products are affected by improper certificate validation in Siemens Advanced Licensing (SALT) Toolkit. This could allow an unauthenticated remote attacker to perform man in the middle attacks.
Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends countermeasures for products where fixes are not, or not yet available.
Vulnerabilities 1
-
High 8.1
A vulnerability has been identified in COMOS V10.6 (All versions < V10.6.1), COMOS V10.6 (All versions < V10.6.1), JT B…
Revision history
-
#2
Added fix for COMOS V10.6, Simcenter Studio and Simcenter System Architect
-
#1
Publication Date
References
-
SSA-710408: Missing Server Certificate Validation in Siemens Advanced Licensing (SALT) Toolkit - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-710408.html